Segmentation Fault Vulnerability in NASM by NASM Project
CVE-2020-21528

5.5MEDIUM

Key Information:

Vendor

Nasm

Status
Netwide Assembler
Vendor
CVE Published:
22 August 2023

What is CVE-2020-21528?

A segmentation fault vulnerability exists in the ieee_segment function of outieee.c in specific versions of NASM. This flaw enables remote attackers to provoke a denial of service condition by utilizing specially crafted assembly files. Upon processing such files, the vulnerability can lead to unexpected application behavior or crashes, exposing systems to potential exploitation.

References

https://bugzilla.nasm.us/show_bug.cgi?id=3392637
https://security.gentoo.org/glsa/202312-09
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.